Ransomware

BitPaymer

First seen: 2017-08 • Status: inactive

Currently Inactive

BitPaymer was Evil Corp's first major ransomware. It eventually became DoppelPaymer.

Overview

BitPaymer was an early Evil Corp ransomware targeting enterprises. It evolved into DoppelPaymer.

How It Spreads

  • Dridex botnet

What It Does

  • File encryption
  • Manual deployment
  • High ransoms

Is your business exposed?

Target Platforms

Windows

Detection Tips

  • Historical threat

MITRE ATT&CK Techniques

T1486

If You're Infected

  1. 1.

    Historical - see DoppelPaymer

Related Malware

Doppelpaymer, Dridex

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required